Mm

... looked at it and you assumed that the only way to interact with the report was through a browser, you'd say, "Cool, there's nothing in here." But if you looked underneath the hood, you would find Medicaid IDs, uh, gender, birth date, uh, race, uh- Ward location.

Uh, so all of that combined, you don't have names, you don't have Social Security numbers, but with that much information you can usually get a name.

And from that name and Medicaid ID and all that other compensating PI- you know, PHI, right? This is covered by HIPAA.

You could theoretically imagine a scenario where somebody successfully uses that Medicaid ID to make claims, to do whatever they might do.

Um, so the risk for fraud is still really, really real because getting that data would not look any different forensically from just looking at the report.

Uh, so it's a really tough situation for p- anybody affected, and I don't know if...

No, go, go ahead, Alex.